Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/67C2BFEC61EC11EDB740B02AC4F9AE02.roa
File: 67C2BFEC61EC11EDB740B02AC4F9AE02.roa (raw, json)
Hash identifier: +szwE1FqYlbLsPgP09GKHckFA87HXpfsxHfu0nFoUaM=
Subject key identifier: 3A:2B:0D:CB:B5:B3:A6:29:DC:D7:B9:E8:5E:7B:CD:50:16:25:C2:D5
Certificate issuer: /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial: 047D
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/67C2BFEC61EC11EDB740B02AC4F9AE02.roa
Signing time: Sat 25 Jan 2025 00:13:40 +0000
ROA not before: Sat 25 Jan 2025 00:13:40 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 57401
IP address blocks: 2407:9240:3700::/40 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149 (0x47d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91618BC
Validity
Not Before: Jan 25 00:13:40 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67942cb3-a951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:32:af:37:4c:8a:5d:51:08:78:3d:09:83:8f:
e6:32:ec:d6:99:ed:d6:89:2b:eb:1f:2b:87:7a:91:
1a:4d:f0:30:57:b4:ee:44:ce:23:f8:e6:ff:a2:2d:
94:37:93:aa:ed:b9:3b:81:d6:53:64:d2:c0:34:9c:
17:85:13:60:2a:eb:16:47:51:7a:44:50:51:97:dc:
34:7b:82:f7:ea:3c:a5:30:16:c0:d7:f2:6c:03:3d:
14:71:31:3b:cf:d3:85:40:a3:fd:ad:cf:13:6a:69:
92:c8:53:1a:bb:76:73:d6:75:ae:09:74:23:02:ee:
bf:a8:53:bc:99:b0:c2:a6:b7:62:86:9f:fd:4b:0f:
50:01:7b:a9:82:bd:2e:51:af:7d:c1:86:50:a3:49:
d3:f4:ed:a1:21:97:ce:65:fd:8b:de:9c:8e:3e:41:
32:ec:9d:e9:99:56:75:11:15:c9:22:4b:53:1b:18:
f0:1f:01:25:f1:f5:f3:c7:7c:e0:f6:ae:69:ed:a6:
37:69:26:26:2b:36:d9:b6:90:df:d3:2d:b7:1e:eb:
61:dc:2b:34:12:26:d1:96:a0:91:56:0c:d5:ef:11:
18:9c:9c:81:32:da:72:66:24:bb:1b:2c:60:3d:f1:
15:d6:72:a2:32:ed:ad:48:46:ac:60:67:63:ee:f8:
03:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2B:0D:CB:B5:B3:A6:29:DC:D7:B9:E8:5E:7B:CD:50:16:25:C2:D5
X509v3 Authority Key Identifier:
keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/67C2BFEC61EC11EDB740B02AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9240:3700::/40
Signature Algorithm: sha256WithRSAEncryption
25:da:c2:84:20:da:00:32:fb:a9:13:d6:c0:7a:84:4f:be:e8:
f7:73:17:b0:ff:59:f1:c9:81:15:fe:46:19:9f:88:d3:b7:c8:
07:0d:25:16:a6:06:10:cf:a2:d1:e6:64:38:a0:77:28:a4:bd:
9d:c0:22:38:ac:65:1a:0a:cf:5c:e2:a9:73:7a:dc:0d:6d:12:
cb:8a:81:6d:bd:2e:c4:d1:e0:64:75:9d:f9:b0:87:dc:69:bd:
83:4c:78:9b:03:dc:4e:86:e4:f5:8a:95:fa:1f:6e:dd:4e:d5:
33:06:9b:6d:14:3a:c3:cf:42:a0:2c:7d:4a:fc:0c:b9:f5:db:
46:13:a9:b7:78:5a:bb:be:73:6d:a5:4c:51:88:72:8c:e7:2d:
b2:90:e8:56:13:cf:21:72:39:4a:fb:f4:30:7e:8c:5b:d1:4d:
92:91:4b:f6:36:71:4a:24:8e:4f:66:2e:ad:f4:2f:36:15:4b:
3a:52:98:f9:5f:06:e3:d8:00:51:fb:8e:25:4c:ea:22:2d:b8:
5b:8b:1a:96:0c:7d:fe:b8:85:0a:7c:19:09:f6:0a:2c:62:e6:
86:f9:4d:85:65:7d:ce:7f:ee:be:8b:4a:dc:41:8d:35:5c:98:
6c:59:2b:d9:b0:71:02:c6:60:34:7e:42:9c:dd:9e:f4:7e:92:
d3:60:aa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:00:33 2025 by rpki-client